Description

You will integrate security practices directly into the DevOps lifecycle to ensure secure software development, deployment, and operations.

Responsibilities

• Embed security checks including SAST, DAST, and SCA into CI/CD pipelines to automate vulnerability scanning and remediation.
• Secure Infrastructure as Code templates using Terraform or CloudFormation and implement policies to prevent misconfigurations.
• Configure security monitoring tools and respond to incidents through root cause analysis.
• Conduct threat modeling during design phases and recommend mitigation strategies.
• Automate security tasks and integrate tools like SonarQube, Aqua Security, and HashiCorp Vault.
• Maintain audit trails and documentation to ensure adherence to standards such as ISO 27001, NIST, GDPR, and HIPAA.

Required Skills

• 6+ years of professional experience in security or DevOps roles.
• Proficiency in Python, Bash, Go, Ruby, or JavaScript.
• Hands-on experience with CI/CD pipelines and Jenkins.
• Strong understanding of OAuth2, SAML, and JWT.
• Experience with cloud platforms including AWS, Azure, or GCP.
• Knowledge of container security, Kubernetes RBAC, and network policies.
• Familiarity with IaC tools like Terraform or Pulumi.
• Experience with secrets management using HashiCorp Vault.
• Understanding of cryptography, TLS, SSL, and encryption standards.

Key Skills

Education

Any Graduate